---
page_title: "cloudflare_authenticated_origin_pulls_certificate Resource - Cloudflare"
subcategory: ""
description: |-
  Provides a Cloudflare Authenticated Origin Pulls certificate
  resource. An uploaded client certificate is required to use Per-Zone
   or Per-Hostname Authenticated Origin Pulls.
---

# cloudflare_authenticated_origin_pulls_certificate (Resource)

Provides a Cloudflare Authenticated Origin Pulls certificate
resource. An uploaded client certificate is required to use Per-Zone
 or Per-Hostname Authenticated Origin Pulls.

## Example Usage

```terraform
# Per-Zone Authenticated Origin Pulls certificate
resource "cloudflare_authenticated_origin_pulls_certificate" "my_per_zone_aop_cert" {
  zone_id     = "0da42c8d2132a9ddaf714f9e7c920711"
  certificate = "-----INSERT CERTIFICATE-----"
  private_key = "-----INSERT PRIVATE KEY-----"
  type        = "per-zone"
}

# Per-Hostname Authenticated Origin Pulls certificate
resource "cloudflare_authenticated_origin_pulls_certificate" "my_per_hostname_aop_cert" {
  zone_id     = "0da42c8d2132a9ddaf714f9e7c920711"
  certificate = "-----INSERT CERTIFICATE-----"
  private_key = "-----INSERT PRIVATE KEY-----"
  type        = "per-hostname"
}
```
<!-- schema generated by tfplugindocs -->
## Schema

### Required

- `certificate` (String) The public client certificate. **Modifying this attribute will force creation of a new resource.**
- `private_key` (String, Sensitive) The private key of the client certificate. **Modifying this attribute will force creation of a new resource.**
- `type` (String) The form of Authenticated Origin Pulls to upload the certificate to. Available values: `per-zone`, `per-hostname`. **Modifying this attribute will force creation of a new resource.**
- `zone_id` (String) The zone identifier to target for the resource. **Modifying this attribute will force creation of a new resource.**

### Optional

- `timeouts` (Block, Optional) (see [below for nested schema](#nestedblock--timeouts))

### Read-Only

- `expires_on` (String) **Modifying this attribute will force creation of a new resource.**
- `id` (String) The ID of this resource.
- `issuer` (String) **Modifying this attribute will force creation of a new resource.**
- `serial_number` (String) **Modifying this attribute will force creation of a new resource.**
- `signature` (String) **Modifying this attribute will force creation of a new resource.**
- `status` (String) **Modifying this attribute will force creation of a new resource.**
- `uploaded_on` (String) **Modifying this attribute will force creation of a new resource.**

<a id="nestedblock--timeouts"></a>
### Nested Schema for `timeouts`

Optional:

- `create` (String)

## Import

Import is supported using the following syntax:

```shell
$ terraform import cloudflare_authenticated_origin_pulls_certificate.example <zone_id>/<certificate_type>/<certificate_id>
```
